$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa File: 52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa (raw, json) Hash identifier: 4iJZQNEWg9nyokj0s+dB19hgiO2QxnpKCSUxDa5qbg8= Subject key identifier: E8:ED:7D:A6:69:B5:A1:84:B5:CC:CA:7A:54:D0:44:A5:AA:C0:09:5F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF5D768A192312CBBD7E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397221 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f5:d7:68:a1:92:31:2c:bb:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=4ae77103-02f8-4460-8d31-329a127f4cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:ba:d7:7c:73:1b:e7:06:06:ae:68:f4:f3: ae:41:6e:3b:fe:28:3e:ea:9d:ad:1b:2a:5a:09:12: c3:c2:d5:81:ee:a2:1b:64:a3:af:9c:12:7c:2b:ce: ae:44:1c:b6:8d:1c:78:ce:01:66:7e:5d:23:c9:c1: d7:6b:fb:4e:23:56:48:c6:14:54:69:97:b2:68:48: f0:eb:ec:1a:43:3a:05:4a:e0:9f:f2:b9:f6:40:58: dc:ea:27:1c:f0:96:a6:6e:64:27:3c:f5:8f:22:05: 91:d6:6a:8a:37:96:f5:48:15:de:fb:96:30:d7:5e: 32:55:ec:97:5b:b4:7f:88:7b:42:25:72:4f:a8:d2: 82:cc:aa:02:36:cb:e7:d3:ba:73:76:ac:eb:e7:7a: 1a:a2:fe:6a:29:c1:a6:f4:22:07:a0:02:79:c0:22: 77:c2:36:d7:94:24:d1:e2:d7:84:db:20:24:10:ec: c9:be:8c:bb:83:ed:da:84:d6:60:95:fb:e1:84:d5: de:a0:1b:96:5c:56:17:9d:1e:77:c6:ba:8b:f3:eb: 90:6e:92:50:af:59:77:10:72:fd:3f:9c:ea:59:86: 4f:c6:84:4c:c4:ad:11:68:8d:50:b0:4b:f8:ee:d5: 3f:55:e4:4d:38:d4:b4:1f:2e:e0:03:08:8f:e6:4a: 61:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:ED:7D:A6:69:B5:A1:84:B5:CC:CA:7A:54:D0:44:A5:AA:C0:09:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d1:50:b0:b8:23:ad:a0:82:25:36:0a:13:cf:56:dd:b3:4d: 16:c7:ff:a7:4c:36:a3:47:25:45:d0:21:57:d3:13:7f:1e:a5: 55:f6:83:b0:78:0a:a9:3e:25:18:91:d6:8d:e5:9d:8d:83:94: 82:92:46:42:f9:b8:ec:41:8f:5e:1f:21:4b:dd:87:81:0e:92: 52:ac:31:1b:06:ec:25:38:60:77:74:d2:f7:a7:12:18:d3:48: 9b:69:52:b4:05:38:ac:af:1a:4f:43:72:9d:81:3c:ad:a3:4e: 0a:1d:1a:34:38:82:68:80:1a:64:cf:28:03:b8:f1:88:96:fd: 87:4c:a7:5e:e8:07:2e:44:c8:b6:7c:24:17:cc:49:ed:15:e4: 33:42:40:94:07:72:cf:3d:54:37:b0:a4:e7:32:58:45:1b:69: c2:5f:76:66:5c:f9:99:fa:98:5b:ee:23:8e:92:75:aa:dd:49: 0e:c3:4d:45:31:e6:f4:cd:2d:1c:25:f7:bd:73:d8:06:e1:74: 12:6c:a5:c9:63:98:da:9c:91:74:d8:4d:af:dc:a8:d5:92:1c: 9c:b8:ba:ff:3d:ea:55:35:51:01:f9:52:9a:06:53:0e:e2:9c: c7:0b:56:f1:3e:f6:ce:50:3f:fb:b8:4d:64:39:94:80:88:b4: e5:99:ec:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/XXaKGSMSy71+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NGFlNzcxMDMtMDJmOC00NDYwLThkMzEtMzI5YTEyN2Y0Y2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYW613xzG+cGBq5o9POuQW47/ig+6p2tGypa CRLDwtWB7qIbZKOvnBJ8K86uRBy2jRx4zgFmfl0jycHXa/tOI1ZIxhRUaZeyaEjw 6+waQzoFSuCf8rn2QFjc6icc8JambmQnPPWPIgWR1mqKN5b1SBXe+5Yw114yVeyX W7R/iHtCJXJPqNKCzKoCNsvn07pzdqzr53oaov5qKcGm9CIHoAJ5wCJ3wjbXlCTR 4teE2yAkEOzJvoy7g+3ahNZglfvhhNXeoBuWXFYXnR53xrqL8+uQbpJQr1l3EHL9 P5zqWYZPxoRMxK0RaI1QsEv47tU/VeRNONS0Hy7gAwiP5kph6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjtfaZptaGEtczKelTQRKWqwAlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTJkMmY3Y2ItZThkMS0z OWRkLWIxY2UtZmU0ZmE4ODE5ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjRULC4I62ggiU2ChPPVt2zTRbH/6dMNqNHJUXQIVfTE38epVX2g7B4 Cqk+JRiR1o3lnY2DlIKSRkL5uOxBj14fIUvdh4EOklKsMRsG7CU4YHd00venEhjT SJtpUrQFOKyvGk9Dcp2BPK2jTgodGjQ4gmiAGmTPKAO48YiW/YdMp17oBy5EyLZ8 JBfMSe0V5DNCQJQHcs89VDewpOcyWEUbacJfdmZc+Zn6mFvuI46SdardSQ7DTUUx 5vTNLRwl971z2AbhdBJspcljmNqckXTYTa/cqNWSHJy4uv896lU1UQH5UpoGUw7i nMcLVvE+9s5QP/u4TWQ5lICItOWZ7OA= -----END CERTIFICATE-----Generated at Sun Oct 26 10:48:56 2025 by rpki-client